search menu icon-carat-right cmu-wordmark

CERT Coordination Center

CERT/CC Vulnerability Notes Database


Published Public Updated ID CVSS Title
2026-07-10 2026-07-10 2026-10-29 VU#564823 GNU Wget enables SSRF via unvalidated FTP PASV IPs
2026-10-26 2026-10-26 2026-10-28 VU#701544 Retraction of mpc-lib hardened derivation fails to protect ancestor isolation
2026-09-08 2026-09-08 2026-10-28 VU#943094 ONLYOFFICE ownCloud integration plugin contains a Server-Side Request Forgery (SSRF) vulnerability
2026-10-13 2026-10-13 2026-10-27 VU#573195 Go, OpenSSL, Apple, LibreSSL, pyca, wolfSSL Name-Constraint inconsistency in RFC 5280 implementation
2026-10-14 2026-10-14 2026-10-27 VU#948176 Multiple TLS libraries can bypass delegation enforcement
2026-10-14 2026-10-14 2026-10-27 VU#410595 Google BoringSSL Name Constraints bypass in SAN validation logic
2026-10-20 2026-10-20 2026-10-27 VU#645818 Xerj Console API authentication bypass leads to unauthorized credential minting
2026-10-13 2026-10-13 2026-10-27 VU#456950 Komodo Periphery agent contains an OS command injection vulnerability
2026-06-22 2026-06-22 2026-10-26 VU#226679 Microsoft WinRE allows for bypass of UEFI/BIOS password enforcement
2026-10-26 2026-10-26 2026-10-26 VU#128947 COVESA vsomeip excessive memory allocation in reliable (TCP) endpoint buffer handling
2026-10-22 2026-10-22 2026-10-22 VU#763488 Memory corruption vulnerabilities in PHP
2026-09-24 2026-09-24 2026-10-21 VU#234131 ViewSonic vCast media streaming service allows unauthenticated screen exfiltration and device compromise
2026-10-13 2026-10-13 2026-10-15 VU#157374 XSS vulnerability in Shopware 6 enables Admin Token Theft and RCE
2026-10-14 2026-10-14 2026-10-14 VU#166125 Bisheng has authentication bypass vulnerabilities
2026-10-13 2026-10-13 2026-10-14 VU#382143 Lowcoder Query Library API contains cross-tenant authorization bypass allowing for data exfiltration

Sponsored by CISA.